Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130382e302f32332d3233203d3e20323632343434.roa
File:                     3137372e35322e3130382e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          IqXuIttgPmpSyMu6TshG6sHsMmyQ8QNoOB/aD8wYqzw=
Subject key identifier:   94:59:7C:5B:C6:BD:8A:AF:C7:F4:E9:11:D8:5A:79:8F:66:C5:FC:D5
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       1623833F01B499E1EE203962F7195D4D217D2AC9
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130382e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:44 +0000
ROA not before:           Wed 07 Aug 2024 13:09:44 +0000
ROA not after:            Wed 06 Aug 2025 13:14:44 +0000
asID:                     262444
IP address blocks:        177.52.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:23:83:3f:01:b4:99:e1:ee:20:39:62:f7:19:5d:4d:21:7d:2a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:44 2024 GMT
            Not After : Aug  6 13:14:44 2025 GMT
        Subject: CN=94597C5BC6BD8AAFC7F4E911D85A798F66C5FCD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:91:1a:3a:57:f3:65:31:0a:41:38:66:b5:64:
                    79:9f:1c:ac:c6:20:5b:b1:b5:89:51:28:13:24:27:
                    74:63:a1:84:9a:d2:a7:8f:34:d8:f4:b0:dc:a1:05:
                    86:fe:f9:d4:27:6f:d1:89:1a:16:43:5d:58:1d:4b:
                    a4:ea:1e:f0:ce:3b:8b:9d:da:d8:ff:d6:85:c0:60:
                    70:06:0c:d9:7d:ff:d2:94:53:09:63:81:f4:2a:7a:
                    62:1f:73:09:dc:f4:4b:2c:bd:b1:4d:d2:8f:7d:9f:
                    b6:13:79:81:1d:27:09:3a:61:13:52:bd:c7:31:89:
                    93:08:fd:49:3d:f9:21:86:ed:60:50:7b:b0:96:ad:
                    4e:76:49:ca:50:c1:f1:1e:ae:dc:55:fc:87:e8:d5:
                    bf:ae:6f:a5:ee:4d:61:f5:07:e9:12:9f:4f:e5:b8:
                    6b:3b:ae:58:13:bc:e7:99:18:a5:b0:b1:58:5d:47:
                    d1:c6:a5:5e:07:9e:50:48:7e:54:31:d4:39:55:1c:
                    59:c1:7a:53:1c:f6:1e:8d:ea:c7:1a:7f:74:92:7d:
                    85:c9:b2:fb:86:ec:3c:3c:95:45:9b:7c:ce:ff:c6:
                    ae:cb:c0:1d:ca:7f:9c:02:2c:d6:8e:af:e2:08:db:
                    70:02:0e:1d:e7:72:52:c0:f7:62:39:ba:42:c3:f0:
                    27:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:59:7C:5B:C6:BD:8A:AF:C7:F4:E9:11:D8:5A:79:8F:66:C5:FC:D5
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130382e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:c2:07:87:e6:08:a1:9b:3e:88:47:66:5e:92:7e:7e:8a:f5:
         ba:47:9a:74:98:03:2e:9e:11:c1:20:22:31:2a:57:84:1e:9e:
         71:66:e7:06:75:98:68:6f:64:0b:9d:4f:f4:b3:81:fe:dc:85:
         cd:30:2d:d5:8c:9e:2a:a0:9b:86:e6:1d:76:fe:03:59:54:b7:
         66:73:df:26:c7:80:37:d2:df:66:56:da:e4:53:6d:ab:54:c0:
         29:05:e0:dc:e2:62:74:30:6a:45:e8:84:66:64:58:3b:f0:b7:
         a3:82:4b:4c:67:af:34:66:aa:a2:6d:5e:8f:ca:d9:e2:92:fd:
         3a:43:4e:08:04:96:cb:d2:78:6c:97:86:de:16:6c:e5:b6:fc:
         bb:ee:67:8f:4a:65:7c:ed:c3:1b:88:b7:f1:a1:f8:cf:3e:1a:
         ee:2b:15:bc:8b:ba:f1:44:00:5b:c1:41:06:b0:e0:58:b9:c3:
         1a:7b:b9:a6:56:45:2f:cc:48:02:39:60:df:b6:96:da:99:9f:
         99:d0:a1:1b:d8:7e:df:34:d5:3c:a3:b8:f0:d7:99:c9:b5:48:
         b5:85:de:f2:19:76:d1:5d:f7:60:a0:a4:25:cc:90:8d:09:b8:
         4a:e3:9e:f4:76:60:e7:83:69:2e:f5:df:81:fa:e5:de:b5:18:
         6d:5b:02:7e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFiODPwG0meHuIDli9xldTSF9KskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MzUyOTIxODg0MEY0NzFFMzk4Q0Y4RjU4NUI3MUQw
MDdBMkIzNTAeFw0yNDA4MDcxMzA5NDRaFw0yNTA4MDYxMzE0NDRaMDMxMTAvBgNV
BAMTKDk0NTk3QzVCQzZCRDhBQUZDN0Y0RTkxMUQ4NUE3OThGNjZDNUZDRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkRo6V/NlMQpBOGa1ZHmfHKzG
IFuxtYlRKBMkJ3RjoYSa0qePNNj0sNyhBYb++dQnb9GJGhZDXVgdS6TqHvDOO4ud
2tj/1oXAYHAGDNl9/9KUUwljgfQqemIfcwnc9EssvbFN0o99n7YTeYEdJwk6YRNS
vccxiZMI/Uk9+SGG7WBQe7CWrU52ScpQwfEertxV/Ifo1b+ub6XuTWH1B+kSn0/l
uGs7rlgTvOeZGKWwsVhdR9HGpV4HnlBIflQx1DlVHFnBelMc9h6N6scaf3SSfYXJ
svuG7Dw8lUWbfM7/xq7LwB3Kf5wCLNaOr+II23ACDh3nclLA92I5ukLD8CdvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlFl8W8a9iq/H9OkR2Fp5j2bF/NUwHwYDVR0j
BBgwFoAUuINSkhiED0ceOYz49YW3HQB6KzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQ
bjQvMS9CODgzNTI5MjE4ODQwRjQ3MUUzOThDRjhGNTg1QjcxRDAwN0EyQjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODM1MjkyMTg4NDBGNDcx
RTM5OENGOEY1ODVCNzFEMDA3QTJCMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRZWRadEhTOXlxTjYzbzFyc1RBTG5YYUJhbU52dDltTEFnZUJhZ041UG40LzEv
MzEzNzM3MmUzNTMyMmUzMTMwMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxNGwwDQYJKoZIhvcNAQELBQADggEBALTCB4fm
CKGbPohHZl6Sfn6K9bpHmnSYAy6eEcEgIjEqV4QennFm5wZ1mGhvZAudT/Szgf7c
hc0wLdWMniqgm4bmHXb+A1lUt2Zz3ybHgDfS32ZW2uRTbatUwCkF4NziYnQwakXo
hGZkWDvwt6OCS0xnrzRmqqJtXo/K2eKS/TpDTggElsvSeGyXht4WbOW2/LvuZ49K
ZXztwxuIt/Gh+M8+Gu4rFbyLuvFEAFvBQQaw4Fi5wxp7uaZWRS/MSAI5YN+2ltqZ
n5nQoRvYft801TyjuPDXmcm1SLWF3vIZdtFd92CgpCXMkI0JuErjnvR2YOeDaS71
34H65d61GG1bAn4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org